User Tools

Site Tools

Turris OS 3.x changelog

On this page you can find release notes for recent Turris OS releases. If there are any known bugs connected to specific releases, then they're listed here with a workaround. You can also find long-term issues on a separate page called Erratum. We publish posts about all releases to our Forum, where you can also describe any bugs that you find.

Was released on 7th Semptember 2020.


  • mbedtls: security update


Was released on 31st August 2020.


  • notification: check if country is set for stable working Wi-Fi
  • curl, mbedtls: security updates
  • unbound, mdadm, youtube-dl, smartmontools, msmtp, haveged: update
  • obfsproxy, obfs4proxy, yara: removed not-available packages
  • knot-resolver: DNSSEC key is read-only


Was released on 23rd July 2020.


  • gnutls: security update
  • foris, foris-openvpn-plugin, knot-resolver: update
  • 3xmigrate: new userlist


Was released on 4th June 2020.


  • git, samba4, krb5, unbound, knot-resolver, bind: security update
  • updater-ng, nextcloud, btrfs-progs, resolver-conf: update
  • python3-msgpack, atlas-sw-probe, sentinel-dynfw-client: update


Was released on 8th April 2020.


  • tor, subversion: security update
  • msmtp, curl, atlas-sw-probe, reptyr, btrfs-progs, nextcloud, youtube-dl, netdata, netmetr: update


Was released on 12th March 2020.


  • suricata, ppp: security update
  • nextcloud, turris-firewall-rules, unbound, lighttpd: update


Was released on 5th February 2020.


  • opkg: security update
  • wireguard, youtube-dl: update


Was released on 16th January 2020.


  • openssl, ffmpeg, unbound: security update
  • kernel, resolver-conf, knot-resolver, nextcloud: update


Was released on 20th December 2019.


  • git: security update


Was released on 18th December 2019.


  • Merry Christmas!

Introduced package: christmas

  • knot-resolver: security update


Was released on 4th December 2019.


  • php7: security update
  • kernel, unbound, python3-uci: update


Was released on 20th November 2019.


  • tcpdump, sudo, uci, libarchive: security update
  • knot-resolver, wireguard, kernel, youtube-dl, turris-maintain, knot: update
  • foris-controller-openvpn-module: fix server ip address autodetection
  • ripe-atlas-probe, atlas-sw-probe: new packages


Was released on 14th October 2019.


  • foris, youtube-dl, wireguard, nextcloud, kernel: update
  • bird, python[3]-urllib3, netdata, ustream-ssl: update
  • openssl, unbound: security update


Was released on 16th September 2019.


  • unbound, haveged, youtube-dl, wireguard, nextcloud, kernel: update
  • bind, lighttpd: security update
  • ucollect: CA certificate update


Was released on 13th August 2019.


  • iptables: security update (CVE-2019-11360)
  • knot-resolver, netdata, youtube-dl, foris, sentinel-certgen, wireguard, python3-idna, kernel: update
  • resolver-conf: add secondary IP for DNS server (IPv4 and IPv6)
  • turris-netboot: minor fixes and add parameter force
  • dev-detect: introduce a new lightweight version than pakon-dev-detect (opt-in)


Was released on 19th June 2019.


  • bind, libxslt, libpng, dovecot, gnutls, wget, samba4, tiff, suricata: security updates
  • schnapps, netdata, youtube-dl, libhtp, foris, syslog-ng, nextcloud, resolver-conf: update
  • python-certifi, python-urllib3, python3-pyroute2: new packages
  • kernel: update (CVE-2019-11477, CVE-2019-11478, CVE-2019-11479)
  • support for our new ODVR servers with DNS over TLS


Was released on 17th April 2019.


  • mosquitto, libatsha204, libssh2, dovecot: security updates
  • unbound, netdata, nextcloud, youtube-dl, ca-certificates, czmq: update
  • python3-certifi, python3-urllib3: new packages
  • pakon: minor fixes
  • kernel: update


Was released on 26th March 2019.


  • Foris: unification of themes across all Turris products
  • foris-controller-openvpn-module: compression logic updates
  • turris-netboot: initial support for booting Turris MOX over network
  • openssh, keepalived, tar, dovecot, curl, prosody, openssh, openssl, bind, tor: security updates
  • tvheadend, youtube-dl, wireguard, syslog-ng, unbound, netdata and various minor packages: update
  • lua-cqueues: add a new package
  • kernel: update
  • logread: fix
  • foris-pakon: fix for Safari


Was released on 15th January 2019.


  • knot-resolver: update improving behaviour without IPv6
  • mac80211: update to the latest version from LEDE 17.01
  • pakon: fix sorting and other small issues
  • foris: internal bus replaced by mosquito, if you are using mosquito, make sure it is still active
  • uboot-mkimage and dtc: new packages
  • kernel, samba, wget and various minor packages: update


Was released on 19th December 2018.


  • netdata: update for Omnia
  • subversion, unbound, git, ath10k-ct, miniupnpd, mwan3: updates
  • samba4, bzip2, openssl, tiff, apache, sqlite3: security updates
  • pakon: further improvements of archivation
  • majordomo: removed from the list of applications on updater page, still available for manual installation
  • mdadm, webapps, nextcloud: minor fixes
  • tvheadend: fix first time setup


Was released on 10th December 2018.


  • foris: migration to python3
  • foris: wizard replaced by guide
  • foris: small cleanups and rearranging
  • sentinel: first parts of new data collection engine
  • samba4: experimental support
  • better integration of third party web applications
  • various package updates (for example Knot Resolver, Nextcloud 14, tor, netdata, yara, vim, minidlna, mbedtls, wireguard, and so on)


Was released on 15th October 2018.


  • kernel, nextcloud, btrfs-progs, php: update
  • kernel: drop blkio LED trigger as it was causing some issues from time to time
  • pakon: more robust database maintanance


Was released on 26th September 2018.


  • kernel, ath10k-firmware: update
  • ath10k-ct: fix missing symbols
  • lighttpd: fix manually edited configuration file


Was released on 20th September 2018.


  • kernel, tiff: security update
  • openssh, nextcloud, lighttpd, libpcap, openssl, ath10k-ct, minidlna, wireguard: updates
  • pakon: more robust recovery from broken database
  • storage: fix support for partitionless drives
  • procd: minor compatibility fixes
  • lxc: more prominent warning about container usage“


Was released on 22nd August 2018.


  • kernel, odhcpv6, twisted, openssh: update
  • ca-certificates: package for ca bundle
  • unbound: enable TCP fast open
  • haas-proxy: more robust CPU usage limits
  • odhcpv6: disable unicast support (caused problems in some networks), can be enabled in /etc/config/network


Was released on 16th August 2018.


  • kernel: update to version 4.4.147; fixes TCP vulnerability CVE-2018-5390
  • owfs: update to the version 3.2p2 (also upstreamed to OpenWRT)
  • ustream-ssl: update to the version from 24/05/2018
  • pakon: fix notify for new devices detection
  • suricata-pakon: default mode for suricata is now IDS
  • haas-proxy: updated to the version 1.9.0 (logging with timestamps and added more modes for logs)
  • knot-resolver: security fix, update to the version 2.4.1
  • dump1090: builds for Turris 1.x, too.
  • nextcloud: update to the version 13.0.5
  • nginx: update to version 1.15.1
  • transmission: update to the version 2.94; allow to define custom webui
  • luci-app-transmission: allow to define custom webui


Was released on 27th June 2018.


  • nextcloud: update
  • pakon, storage: minor fixes
  • kernel, unbound: update and minor fixes


Was released on 18th June 2018.


  • haas: fix firewall integration
  • ucollect: more robust start
  • updater: fix collisions when updating from old versions
  • dvbsky: fix driver compilation
  • nut: fix update
  • kernel, nextcloud: update


Was released on 7th June 2018.


  • Foris support for 6in4 and 6to4
  • Foris and OpenVPN server: users can choose the protocol TCP/UDP
  • Foris and OpenVPN server: fix for generating CA
  • Foris - Wizard: fix for 7th step
  • Foris - Pakon: fix compatibility for Safari and IE browsers
  • Netmetr synchronization code
  • kernel: update and added driver for UAS and the driver is also added to the NAS list


Was released on 10th May 2018.


  • Foris: possibility to change time settings outside of the wizard
  • Foris: fix noncrypto random csrf (thanks to Stephen Röttger)
  • Foris - plugin: Storage plugin, which will move IO-intensive data to an external drive
  • Foris - plugin: Server Side backups
  • Pakon: Foris user interface and better results filtering
  • Updates to various upstream packages
  • Updater: dropped obsolete and friends, use ‘’pkgupdate’’ instead

Excessive writing to the internal flash disk (eMMC) wear it out and this can result in irreparable damage to your device, which doesn't have to be covered by warranty.


Was released on 6th March 2018.


  • haas: update and fix logging and firewall
  • irssi, rsync, dovecot, squid, mxml, libvorbis, libtasn1, unzip, php: security updates
  • xfsprogs: add xfs_admin tool
  • luci-lxc: fix container creation
  • kernel: update, modules for dvb-mn88473 and dvb-usb-cxusb added
  • dnsmasq: fix sequential ip assignment
  • suricata: fix workaround for some IPv6 issues


Was released on 6th February 2018.


  • HaaS: fix session pairing, disabled logging by default
  • Foris: updated description for Access tokens
  • updater: fix dependencies
  • suricata: workaround for some IPv6 issues

Known issues

Suricata and IPv6 issues

  • LAN doesn't get router advertisement of IPv6
    • Workaround: Will be present in new version of Turris OS, right now you can edit file /etc/init.d/suricata and change line


echo "-I suricata -p icmp -j RETURN" >> $IP6TABLES_RULES #workaround: ignore ICMPv6


echo "-I suricata -p icmpv6 -j RETURN" >> $IP6TABLES_RULES #workaround: ignore ICMPv6


Was released on 30th January 2018.


  • haas: update to the latest version
  • haas: more robust registration
  • kernel: update to the latest version, Sierra Wireless EM7565 drivers
  • nextcloud: update to the latest version
  • poco, mariadb, curl, unbound, bind: security updates
  • Foris: fixed DNS tab for Turris 1.x routers
  • lighttpd-https-cert: Added warning to file /etc/lighttpd/conf.d/ssl-enable.conf that you shouldn't modify it

Known issues


  • HaaS doesn't show records on the website
    • Gitlab commit
    • Workaround: remove line 29 procd_set_param user nobody in file /etc/init.d/haas-proxy


Was released on 22nd January 2018.


  • knot-resolver: fixes security issue CVE-2018-1000002


Was released on 16th January 2018.


  • musl & busybox: use stronger password hash by default
  • kernel: update to the latest version
  • netmetr: fix configuration reset
  • updater: various small fixes
  • openssl, libtiff, socat, rsync, coreutils, php, irssi: security updates
  • tvheadend: update to the latest version
  • knot-resolver & unbound: fixes in local domains
  • suricata: fix startup issue on some routers, performance tweaks


Was released 21st December 2017.
We bring LXC image Debian Jessie back and updated Ubuntu image.


  • coreutils: update to the latest version
  • uci: less sync calls - faster commits
  • hostapd: updated patches from LEDE
  • kernel: update to the latest version, fix LXC error
  • pakon: more robust installation
  • updater: more robust updates and fixes to local repos handling
  • knot-resolver: update to the latest version
  • foris: updated translations and more diagnostics
  • haas-proxy: more robust firewall integration

Known issues


  • Update of package netmetr resets its configuration


  • executed from terminal hangs when approvals are enabled
    • Gitlab issue turris/updater#241
    • Solution: Approve updates from Foris or remove package coreutils-timeout